Corretto version: 8.452.09.1$$$Release Date: April 15; 2025$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 13.0 and later; x86_64$$$macOS 13.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.452.09.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u452-b09tAlltUpdates Corretto baseline to OpenJDK 8u452-b09tjdk8u452-b09$$$JDK-8352716tAlltUpdate Timezone Data to 2025btJDK-8352716$$$InternaltLinuxtFix alternatives to not conflict with OpenJDK8 packagetPR-520

Corretto version: 8.442.06.1$$$Release Date: January 21; 2025$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 13.0 and later; x86_64$$$macOS 13.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.442.06.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u442-b06tAlltUpdates Corretto baseline to OpenJDK 8u442-b06tjdk8u442-b06$$$JDK-8339637tAlltUpdate timezone data to 2024b.tJDK-8339637$$$JDK-8339632tAlltImprove parsing of Day/Month in tzdata rules.tJDK-8339632$$$JDK-8341117tAlltChange Entrust TLS distrust date to November 12; 2024tJDK-8341117$$$JDK-8341104tAlltAdd 2 SSL.com TLS roots.tJDK-8341104$$$JDK-8338166tAlltDistrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAstJDK-8338166

Corretto version: 8.412.08.1$$$Release Date: April 16; 2024$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 12.0 and later; x86_64$$$macOS 12.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.412.08.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u412-b08tAlltUpdates Corretto baseline to OpenJDK 8u412-b08tjdk8u412-b08$$$Backport 8296654tmacOSt[macos] Crash when launching JavaFX app with JDK that targets SDK 13t8296654$$$The following CVEs are addressed in 8.412.08.1:$$$$$$CVEtCVSStComponent$$$CVE-2024-21011t3.7thotspot/runtime$$$CVE-2024-21068t3.7thotspot/compiler$$$CVE-2024-21085t3.7tcore-libs/java.util$$$CVE-2024-21094t3.7thotspot/compiler$$$CVE-2024-21002t2.5tjavafx/graphics$$$CVE-2024-21003t3.1tjavafx/graphics$$$CVE-2024-21004t2.5tjavafx/window-toolkit$$$CVE-2024-21005t3.1tjavafx/graphics

The following CVEs are addressed in 8.402.08.1:$$$$$$CVEtCVSStComponent$$$CVE-2024-20952t7.4tsecurity-libs/java.security

Change Log for Amazon Corretto 8$$$The following sections describe the changes for each release of Amazon Corretto 8.$$$$$$Corretto version: 8.392.08.1$$$Release Date: October 17; 2023$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 11.0 and later; x86_64$$$macOS 11.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.392.08.1:$$$$$$Issue Namett PlatformtDescriptionttttt Link$$$Import jdk8u392-b08t AllttUpdates Corretto baseline to OpenJDK 8u392-b08tjdk8u392-b08$$$Backport of JDK-8139348tAllttDeprecate 3DES and RC4 in Kerberostt JDK-8139348$$$$$$The following CVEs are addressed in 8.392.08.1:$$$$$$CVEtt CVSStComponent$$$CVE-2023-22067t5.3t other-libs/corba$$$CVE-2023-22081t5.3t security-libs/javax.net.ssl

Change Log for Amazon Corretto 8$$$The following sections describe the changes for each release of Amazon Corretto 8.$$$$$$Corretto version: 8.382.05.1$$$Release Date: July 18; 2023$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 11.0 and later; x86_64$$$macOS 11.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.382.05.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u382-b05tAlltUpdates Corretto baseline to OpenJDK 8u382-b05tjdk8u382-b05$$$The following CVEs are addressed in 8.382.05.1:$$$$$$CVEtCVSStComponent$$$CVE-2023-22045t3.7thotspot/compiler$$$CVE-2023-22049t3.7tcore-libs/java.io$$$CVE-2023-22043t5.9tjavafx/graphics

Change Log for Amazon Corretto 8$$$The following sections describe the changes for each release of Amazon Corretto 8.$$$$$$Corretto version: 8.372.07.1$$$Release Date: April 18; 2023$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Alpine-based Linux; aarch64$$$Windows 10 or later; x86; x86_64$$$macOS 11.0 and later; x86_64$$$macOS 11.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.372.07.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u372-b07tAlltUpdates Corretto baseline to OpenJDK 8u372-b07tjdk8u372-b07$$$(tz) Update Timezone Data to 2023ctAlltUpdate Timezone Data to 2023ct#459$$$Update amazon cacertstAlltUpdate amazon cacerts file from amazonlinuxt#456 #457 #458$$$Backport 8262896tmacOS aarch64tFix crash in rash in jni_fast_GetLongFieldt8262896$$$Backport 8285515tmacOStFix DatagramChannel.disconnect fails with Invalid argument on macOS 12.4t8285515$$$The following CVEs are addressed in 8.372.07.1:$$$$$$CVEtCVSStComponent$$$CVE-2023-21930t7.4tsecurity-libs/javax.net.ssl$$$CVE-2023-21954t5.9thotspot/gc$$$CVE-2023-21967t5.9tsecurity-libs/javax.net.ssl$$$CVE-2023-21939t5.3tclient-libs/javax.swing$$$CVE-2023-21938t3.7tcore-libs/java.lang$$$CVE-2023-21937t3.7tcore-libs/java.net$$$CVE-2023-21968t3.7tcore-libs/java.nio

The following sections describe the changes for each release of Amazon Corretto 8.$$$$$$Corretto version: 8.362.08.1$$$Release Date: January 17; 2023$$$$$$Target Platforms 1$$$$$$RPM-based Linux using glibc 2.12 or later; x86_64$$$Debian-based Linux using glibc 2.12 or later; x86_64$$$RPM-based Linux using glibc 2.17 or later; aarch64$$$Debian-based Linux using glibc 2.17 or later; aarch64$$$Alpine-based Linux; x86_64$$$Windows 10 or later; x86; x86_64$$$macOS 10.15 and later; x86_64$$$macOS 11.0 and later; aarch64$$$1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.362.08.1:$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u362-b08tAlltUpdates Corretto baseline to OpenJDK 8u362-b08tjdk8u362-b08$$$Fix gradle setting LD_LIBRARY_PATH and configuretAlltFix gradle setting LD_LIBRARY_PATH and configuret#437$$$Fix java_home alternativetLinuxtAlternative dir without architecture should be created on headless packaget#436$$$Relax VerifyCACertstAlltRelax VerifyCACerts expiry conditiont#428$$$Update amazon cacertstAlltUpdate amazon cacerts file from amazonlinuxt$$$The following CVEs are addressed in 8.362.08.1:$$$$$$CVEtCVSStComponent$$$CVE-2023-21835t8287411t5.3$$$CVE-2023-21830t8285021t5.3$$$CVE-2023-21843t8293742t3.7$$$

1. This is the platform targeted by the build. See Using Amazon Corretto in the Amazon Corretto FAQ for supported platforms$$$$$$The following issues are addressed in 8.352.08.1:$$$$$$| Issue Name | Platform | Description | Link | |------------------------------------------|-----------------------------------------------------------|------| | Import jdk8u352-b08 | All | Updates Corretto baseline to OpenJDK 8u352-b08 | jdk8u352-b08 | | JSR 337 MR4 Changes | All | All JSR 337 Maintenance Release 4 related release changes | JSR 337 MR4 | | Update Timezone Data to 2022e | All | All tzdata updates up to 2022e | #426 #427 | | Update amazon cacerts | All | Update amazon cacerts file from amazonlinux | |$$$$$$The following CVEs are addressed in 8.352.08.1:

The following issues are addressed in 8.342.07.3$$$$$$Issue NametPlatformtDescriptiontLink$$$Revert JDK-8194154tAlltRevert 8194154: System property user.dir should not be changedtJDK-8290832 / JDK-8194154$$$Fix macOS packagingtmacOStUpdate macos packaging logic to avoid duplicate paths after installationt#409

The following issues are addressed in 8.332.08.1$$$$$$Issue NametPlatformtDescriptiontLink$$$Import jdk8u332-b08tAlltUpdates Corretto baseline to OpenJDK 8u332-b08tjdk8u332-b08$$$Update zlibtAlltCVE-2018-25032: based upon our analysis; OpenJDK/Corretto is not affected by CVE-2018-25032; because the zlib memLevel parameter is not settable and is fixed at 8; and the usage of the Z_FIXED strategy is prevented. With these settings there is no way to invoke the issue described in the CVE and we only include this fix out of an abundance of caution.